DeepSeek Harness Plugin Hub

Publish and manage complete Harness Profiles. Discover Plugins for your next setup.

Explore

PluginsPresetsDocsNews

Community

Publish a pluginContactReport an issue

Resources

Plugin Hub on GitHubDeepSeek HarnessSystem statusPrivacy notice
© 2026 DeepSeek Harness Plugin HubPowered byPaxTech

Independent and unofficial. Not affiliated with, authorized by, or endorsed by DeepSeek.

Security & Access DSH plugins — Page 25

CATEGORY

Security & Access DSH plugins

Verified manifests and exact versions in this category.

All categories

All pluginsAgents & Orchestration710Memory & Context854Coding & Developer Tools1.9kUI & Customization2.5kIntegrations & Communication1.3kVision & Media463Search & Research614Security & Access860Models & Usage1.1kProductivity & Workflow1.5k

All plugins

863 plugins
Mv0.3.0
dsh-mcp-oauth-client

Mcp Oauth Client

General-purpose MCP manager and client bridge plugin for DeepSeek Harness

↓ 0★ 0
Updated 9/3/2026
v0.2.5
dsh-tool-folder

Tool Folder

Fold the DSH tool surface per request + ChainGuard firewall (high-risk block + exfil-chain detection + anti-obfuscation) + BM25/bge-m3 hybrid tools_search. Shrinks schema tokens 80-90% while keeping selection accuracy. v0.2.0 adds a semantic retrieval leg (local Ollama bge-m3, RRF hybrid) and ChainG

↓ 0★ 0
Updated 9/2/2026
Pv0.1.0
dsh-plumb-identity

Plumb Identity

Per-agent plumb session identity for DeepSeek Harness: stamps and declares a stable plumb session id for every DSH conversation and subagent sharing one plumb MCP connection.

↓ 0★ 0
Updated 9/2/2026
Fv0.2.1
dsh-fs-allowlist

Fs Allowlist

Approval-free writes into whitelisted directories: wraps ctx.fs.checkedTarget for write/edit, auto-approves bash escalations that touch whitelisted paths, with a Settings GUI. 白名单目录写入免审批（write/edit + bash），设置页可视化调整。

↓ 0
Updated 9/2/2026
Cv0.1.0
dsh-circuit-breaker

Circuit Breaker

Stop runaway agent loops in DeepSeek Harness: denies repeated identical tool calls and enforces a per-agent call cap, outside the model where instructions cannot reach.

↓ 0★ 0
Updated 9/2/2026
Kv1.0.0
dsh-kimi-provider

Kimi Provider

Kimi (Kimi Code account) integration bundle for DeepSeek Harness: provider route, models, device-code login and auto token refresh (npm: dsh-kimi-provider)

↓ 0★ 0
Updated 9/2/2026
Dv1.0.0
dsh-default-workspace

Default Workspace

Cross-platform native DSH default workspace with complete read-only access to DSH resources, including sensitive state.

↓ 0★ 0
Updated 9/1/2026
Nv0.1.0-alpha.1
dsh-native-codex-oauth

Native Codex Oauth

Native ChatGPT OAuth controls for DeepSeek Harness's built-in OpenAI Codex provider

↓ 0★ 0
Updated 9/1/2026
v0.1.0
dsh-workspace-memory

Workspace Memory

Approval-gated workspace instructions and memory for DeepSeek Harness

↓ 0★ 0
Updated 9/1/2026
Pv0.1.0
dsh-preset-zombie-guard

Preset Zombie Guard

Preset-zombie guard for DeepSeek Harness: periodically scans session logs (zstd frame decoding) for sessions whose effective agent preset no longer exists in the roster; auto-archives blank zombies via the official workspaceRegistry API and deduplicates warnings for non-blank ones. Ships preset_guar

↓ 0★ 0
Updated 9/1/2026
Av0.1.0
dsh-authmux

Authmux

A DSH-native OAuth multiplexer for subscription-backed model providers

↓ 0★ 0
Updated 9/1/2026
Pv0.1.0
dsh-pentest-bugtrace

Pentest Bugtrace

BugTraceAI penetration-testing mode for deepseek-harness (dsh): pentester persona, bundled runbook skill, and the BugTraceAI MCP bridge in one installable profile bundle.

↓ 0★ 0
Updated 9/1/2026
Dv0.1.0
dsh-danger-guard

Danger Guard

DSH Dangerous Command Guard: Uses the tools/pre-execute gate to intercept high-risk bash/pwsh commands (rm -rf /, mkfs, dd writing to devices, piping scripts for execution, git push --force, etc.), with tiered policies (extremely high risk always denied / medium risk follows the global deny/ask/log

↓ 0★ 0
Updated 9/1/2026
Sv0.1.0
dsh-safe-tool

Safe Tool

AI-powered command approval plugin for DeepSeek Harness — intercepts tool calls and routes them through a read-only review subagent

↓ 0★ 0
Updated 9/1/2026
Vv0.1.0
@aiwayds/dsh-vault

Vault

dsh-plugin: encrypted backup / restore / migration of the dsh home config through a private GitHub repo

↓ 0★ 0
Updated 9/1/2026
Dv1.4.0
deepseek-harness-ssh

Deepseek Harness Ssh

SSH remote control for DeepSeek Harness: run commands / compile and read-write files on a remote machine over SSH (works with reverse-SSH tunnels or Tailscale)

↓ 0★ 0
Updated 9/1/2026
Sv0.1.0
dsh-secret-scrub

Secret Scrub

DeepSeek Harness plugin: redacts known secret shapes in tool arguments and results behind stable placeholders, and appends preimage-free JSONL incidents

↓ 0★ 0
Updated 9/1/2026
Gv0.5.0
dsh-guardian-mode

Guardian Mode

Fifth DeepSeek Harness mode with configurable Codex, Claude Code, or DSH audits, user-approved remediation turns, progressive Cordis/skill elevation, safety pauses, and Web/TUI review controls.

↓ 0
Updated 9/1/2026
Sv0.3.1
dsh-session-allow

Session Allow

DSH Web GUI plugin: session-scoped "Allow for this session" option in the approval dialog (per-mode standing grants, localStorage)

↓ 0★ 0
Updated 8/31/2026
v0.1.1
@yangzhe1991/dsh-futu-mcp

Futu Mcp

DSH plugin: connect to Futu (富途) MCP via OAuth 2.1 and expose its tools to the agent; tokens persisted outside the workspace

↓ 0★ 0
Updated 8/31/2026
Lv0.1.0
dsh-loop-brake

Loop Brake

DeepSeek Harness plugin: a circuit breaker that denies the Nth identical tool call in a row, by exact hash of tool name and canonical arguments

↓ 0★ 0
Updated 8/31/2026
v0.1.0
dsh-qqbot-panel

Qqbot Panel

Visual web settings panel for the official @tencent-connect/dsh-qqbot plugin: manage the QQ Bot AppID/AppSecret, c2c & group access modes/allowlists, cwd and requireMention directly in the DSH web settings page (reads/writes the qqbot profile's cordis.patch.yml).

↓ 0★ 0
Updated 8/31/2026
Cv0.1.1
dsh-cloudflare-mcp

Cloudflare Mcp

Cloudflare MCP connection for DeepSeek Harness: official OAuth 2.0 flow (dynamic client registration + PKCE) against mcp.cloudflare.com, Cloudflare API tools under mcp__cloudflare__*, and a web settings panel

↓ 0★ 0
Updated 8/31/2026
Cv0.1.0
dsh-canary

Canary

DeepSeek Harness plugin: plants a canary string in model-visible context and denies any tool argument or outbound URL that echoes it back

↓ 0★ 0
Updated 8/31/2026
Iv0.1.0
@short-arm-ape/dsh-intranet-browser

Intranet Browser

Bypasses the SSRF protection of @yeesy369/dsh-browser-playwright.

↓ 0★ 0
Updated 8/31/2026
Sv1.0.7
dsh-sandbox-permissions-not-strictly-wider-justification-empty-fix

Sandbox Permissions Not Strictly Wider Justification Empty Fix

Fix no-op upgrade errors for the sandbox_permissions and justification fields in pwsh/bash/fs/dsh-sandbox. Prevent rejection when the session is already in danger-full-access mode and the model provides an empty justification or reasserts the same mode.

↓ 0★ 0
Updated 8/31/2026
Bv0.1.0
dsh-browser-host

Browser Host

DSH host-side bridge for the DSH Browser Client extension: a token-authenticated /ext-api RPC proxy + /ext-events.mux WebSocket event stream + bidirectional /ext-api-control channel, so a browser extension page (which cannot pass the same-origin /api trust fence) can drive the harness from a floatin

↓ 0★ 0
Updated 8/31/2026
Ev0.1.0-alpha.2
dsh-execution-fidelity-guard

Execution Fidelity Guard

Execution-fidelity guard bundle for DeepSeek Harness

↓ 0★ 0
Updated 8/31/2026
Av0.1.0
@hrhgit/dsh-agent-manager

Agent Manager

Manage the declared tool policy of DeepSeek Harness agent presets

↓ 0★ 0
Updated 8/31/2026
Vv0.1.0
dsh-verification-meme

Verification Meme

Maliciously playful security verification: intercepts button clicks in the Harness interface and only allows them through after verification (confirmation/CAPTCHA/human verification/scenic slider/puzzle/9-grid image gallery/animal 9-grid), including a prank console

↓ 0★ 0
Updated 8/31/2026
← Previous1…2324252627…29Next →
DeepSeek Harness Plugin Hub
ProfilesPluginsCategoriesNewsDocsSign inManage Profiles
ProfilesPluginsCategoriesNewsDocsSign in